Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/3139392e38332e3130302e302f32332d3234203d3e203137323232.roa
File:                     3139392e38332e3130302e302f32332d3234203d3e203137323232.roa (raw, json)
Hash identifier:          zN/REGgZkJM4UHi1lh9s0lb7oS9yQRmO/sPGIleimuI=
Subject key identifier:   8F:F4:37:49:50:75:ED:31:DD:5F:67:7F:3A:6C:A8:F4:98:9F:4E:E2
Certificate issuer:       /CN=1259CD7907D08E561037139E148D8385DFD916E2
Certificate serial:       34D8527D1FF751439CBEA96FCE5C7A42F110CF1A
Authority key identifier: 12:59:CD:79:07:D0:8E:56:10:37:13:9E:14:8D:83:85:DF:D9:16:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1259CD7907D08E561037139E148D8385DFD916E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/3139392e38332e3130302e302f32332d3234203d3e203137323232.roa
Signing time:             Thu 04 Apr 2024 15:09:26 +0000
ROA not before:           Thu 04 Apr 2024 15:04:26 +0000
ROA not after:            Thu 03 Apr 2025 15:09:26 +0000
asID:                     17222
IP address blocks:        199.83.100.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/1259CD7907D08E561037139E148D8385DFD916E2.crl
                          rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/1259CD7907D08E561037139E148D8385DFD916E2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1259CD7907D08E561037139E148D8385DFD916E2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:d8:52:7d:1f:f7:51:43:9c:be:a9:6f:ce:5c:7a:42:f1:10:cf:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1259CD7907D08E561037139E148D8385DFD916E2
        Validity
            Not Before: Apr  4 15:04:26 2024 GMT
            Not After : Apr  3 15:09:26 2025 GMT
        Subject: CN=8FF437495075ED31DD5F677F3A6CA8F4989F4EE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:2b:29:91:c9:53:36:71:11:12:00:e2:0e:a0:
                    64:4c:50:39:22:dc:24:5b:00:a8:46:17:1f:8b:fa:
                    69:6f:41:bf:f1:26:6f:5f:41:9e:13:da:3e:68:b6:
                    83:fc:a1:73:c6:95:2f:ae:0b:f4:a8:86:e4:b2:cd:
                    12:48:6c:7b:8f:b1:40:78:69:30:99:b7:a1:12:0b:
                    c0:4c:69:b0:04:6d:0b:b0:bd:0e:15:0e:a1:74:58:
                    3d:03:2f:1c:a5:62:5f:8d:d8:14:ab:f2:75:1a:b3:
                    b3:fe:a4:3a:26:29:c6:ca:fd:87:82:a4:a8:da:67:
                    35:b5:16:0c:c5:1f:a4:16:6d:20:2e:2e:e4:b4:ab:
                    ed:45:ea:9f:03:6e:8a:d6:75:24:87:fb:4c:8a:af:
                    43:87:3b:35:5d:dc:34:0b:e6:fa:9b:89:ce:6a:0f:
                    31:53:1a:de:2c:fc:e8:12:86:f8:e2:db:b7:13:ec:
                    42:23:c4:94:7a:56:e9:a2:d7:6b:d3:c9:39:8e:c2:
                    2e:5a:c1:08:9c:af:6c:2d:ce:b6:24:b8:62:a3:af:
                    24:3f:67:8c:57:84:14:62:4d:82:e4:66:6d:1b:6c:
                    b7:6e:3c:31:e1:94:92:5c:cc:79:e3:2d:b0:e0:27:
                    fd:ab:8e:ae:f8:c1:df:44:a4:f6:69:7d:3a:51:2c:
                    26:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:F4:37:49:50:75:ED:31:DD:5F:67:7F:3A:6C:A8:F4:98:9F:4E:E2
            X509v3 Authority Key Identifier:
                keyid:12:59:CD:79:07:D0:8E:56:10:37:13:9E:14:8D:83:85:DF:D9:16:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/1259CD7907D08E561037139E148D8385DFD916E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1259CD7907D08E561037139E148D8385DFD916E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/3139392e38332e3130302e302f32332d3234203d3e203137323232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.83.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         44:22:1d:34:bb:40:b4:52:2b:96:9e:4b:64:39:aa:08:29:0f:
         14:cf:24:bc:51:35:5d:76:9b:cc:97:ac:64:e6:78:14:2b:1c:
         c6:38:98:6e:e6:88:63:df:12:fc:59:cc:51:6a:4c:2a:95:16:
         a7:30:1d:44:8c:ed:59:32:ad:ce:c3:33:72:bc:18:5c:ff:73:
         26:34:83:06:7b:bb:c0:a8:e4:e4:db:07:93:52:10:3d:7b:a5:
         a0:5b:d8:b9:4b:ab:be:95:ac:12:22:d4:a1:fb:a7:2b:22:6e:
         84:61:6c:1b:4d:38:6c:88:43:25:7d:09:68:e1:b3:d9:38:2d:
         3d:20:6c:56:a0:d8:89:54:24:d4:df:ac:ab:46:3a:6d:43:19:
         81:64:90:c0:b3:c1:38:f9:75:00:16:93:1b:dc:a3:42:e5:48:
         82:ae:ec:ad:ee:c8:c5:c8:11:21:79:fb:56:1c:d5:1a:bb:79:
         f1:5a:ce:3e:b3:53:86:a8:0c:df:15:39:b0:f8:d9:7b:86:08:
         1b:e9:0d:45:80:4d:da:29:cd:8f:59:71:47:8f:5b:53:f1:fc:
         68:6c:f6:d4:3f:99:3e:f4:46:b9:5e:4b:19:35:e0:14:27:38:
         12:09:7a:62:bc:1d:88:66:c8:a1:8e:f6:6b:43:ea:44:e3:33:
         24:8a:da:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:00:19 2024 by rpki-client on console-ams.rpki-client.org